state[.]zewpay[.]cc

This domain, state.zewpay.cc, is currently flagged as a generic phishing site. The domain was registered on September 22, 2025, through Dominet (HK) Limited. As of the report date, July 29, 2026, the domain resolves to the IP address 188.114.97.3. Analysis indicates that the domain appears on one security blocklist, specifically PhishDestroy, which suggests it has been identified as malicious by at least one security organization.

Out of 91 security vendors on VirusTotal, 5 have flagged this domain, indicating a moderate level of detection and suggesting that the domain poses a significant risk. The exact content and nature of the phishing activity on the site have not been fully analyzed, but the elevated risk level and presence on a blocklist warrant immediate attention. Defenders are advised to block access to this domain and monitor network traffic for any connections to it.

Additionally, users should be educated about the dangers of clicking links from unknown sources and the importance of verifying the legitimacy of websites before entering any sensitive information. The domain's registration through a less common registrar and its short lifespan may also indicate a potential for malicious use. Further investigation is recommended to determine the specific type of phishing activity and the target audience of the scam.